https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135162#M1600 <P>My splunk seems to be crashing. It may or may not have to do with using IE 8 in Splunk 6 to edit an event and create a regex as this appears when it started. The crash log is showing what I have below. Stoping and starting does not seem to be helping. Do I have the db_1383938418_1383938238_26/rawdata file locked somehow?</P> <P>Cannot open manifest file inside "/apps/wcm-splunk/var/lib/splunk/audit/db/db_1383938418_1383938238_26/rawdata": No such file or directory<BR /> splunkd: /opt/splunk/p4/splunk/branches/6.0.0/src/pipeline/input/CsvLineBreaker.cpp:153: virtual bool CsvLineBreaker::parser::gotEol(): Assertion <CODE>tellLineStart() &gt;= _offsetAtPdStart' failed.<BR /> 2013-11-08 14:30:31.157 -0500 splunkd started (build 182037)<BR /> Cannot open manifest file inside "/apps/wcm-splunk/var/lib/splunk/audit/db/db_1383938743_1383938743_27/rawdata": No such file or directory<BR /> splunkd: /opt/splunk/p4/splunk/branches/6.0.0/src/pipeline/input/CsvLineBreaker.cpp:153: virtual bool CsvLineBreaker::parser::gotEol(): Assertion</CODE>tellLineStart() &gt;= _offsetAtPdStart' failed.</P> Mon, 28 Sep 2020 15:14:22 GMT andrewkenth 2020-09-28T15:14:22Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135162#M1600 <P>My splunk seems to be crashing. It may or may not have to do with using IE 8 in Splunk 6 to edit an event and create a regex as this appears when it started. The crash log is showing what I have below. Stoping and starting does not seem to be helping. Do I have the db_1383938418_1383938238_26/rawdata file locked somehow?</P> <P>Cannot open manifest file inside "/apps/wcm-splunk/var/lib/splunk/audit/db/db_1383938418_1383938238_26/rawdata": No such file or directory<BR /> splunkd: /opt/splunk/p4/splunk/branches/6.0.0/src/pipeline/input/CsvLineBreaker.cpp:153: virtual bool CsvLineBreaker::parser::gotEol(): Assertion <CODE>tellLineStart() &gt;= _offsetAtPdStart' failed.<BR /> 2013-11-08 14:30:31.157 -0500 splunkd started (build 182037)<BR /> Cannot open manifest file inside "/apps/wcm-splunk/var/lib/splunk/audit/db/db_1383938743_1383938743_27/rawdata": No such file or directory<BR /> splunkd: /opt/splunk/p4/splunk/branches/6.0.0/src/pipeline/input/CsvLineBreaker.cpp:153: virtual bool CsvLineBreaker::parser::gotEol(): Assertion</CODE>tellLineStart() &gt;= _offsetAtPdStart' failed.</P> Mon, 28 Sep 2020 15:14:22 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135162#M1600 andrewkenth 2020-09-28T15:14:22Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135163#M1601 <P>This is once case where I would open a ticket with Splunk. /opt/splunk/bin&gt;splunk diag</P> <P>upload that diag after creating a ticket here:<A href="https://splunk.my.salesforce.com/home/home.jsp">Splunk Support Portal</A></P> Sat, 09 Nov 2013 22:03:50 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135163#M1601 ShaneNewman 2013-11-09T22:03:50Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135164#M1602 <P>The answer is... I had somehow deleted the leading [ from the first stanza in my inputs.conf file.</P> Sat, 09 Nov 2013 22:28:25 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135164#M1602 andrewkenth 2013-11-09T22:28:25Z https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135165#M1603 <P>That will do it! Make sure you mark this as answered. It will give you come karma points and you should get a badge.</P> Sun, 10 Nov 2013 04:29:17 GMT https://community.splunk.com/t5/Monitoring-Splunk/Splunk-Crashing/m-p/135165#M1603 ShaneNewman 2013-11-10T04:29:17Z